An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.
CVSS
No CVSS.
References
Configurations
No configuration.
History
29 Jul 2025, 00:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-29 00:15
Updated : 2025-07-29 14:15
NVD link : CVE-2025-54769
Mitre link : CVE-2025-54769
JSON object : View
Products Affected
No product.
CWE
No CWE.